ACI L3Out Contract Roles for External Initiation
Short answer
D Configure the EPG as a consumer and L3 out as a provider of the contract.
Question
Key Takeaways
The exam tests your understanding of provider vs. consumer roles in ACI contracts based on who initiates the traffic flow.
This question addresses Cisco ACI contract roles in an external Layer 3 cloud scenario. It establishes that when the EPG needs to initiate communication with the outside, it must act as the consumer.
Common mistake: Most users select Option A because they assume web servers 'provide' a service, failing to distinguish between offering a service and needing access to external resources.
Expert Analysis
Why the Answer Is Correct
In Cisco ACI, the 'Consumer' role is assigned to the entity that requests or initiates communication, while the 'Provider' offers the service. Since the requirement states the EPG requires the external cloud to 'initiate communication' (meaning the EPG is the one reaching out), the EPG must be configured as the Consumer.
Why the Other Options Are Wrong
Option A incorrectly assigns the Provider role to the EPG, which would imply the EPG is serving the L3Out. Option B focuses on routing (OSPF) rather than policy/contract enforcement. Option C suggests a taboo contract, which blocks traffic entirely, contradicting the need for connectivity.
Community Comment Notes
Community feedback confirms D is correct. As one user noted, "the web servers need access to the external network for their operations," clarifying that initiating access makes them consumers. Another comment reinforced this by stating the EPG acts as the consumer when it requires the L3Out to facilitate the connection.
Exam Strategy
Always identify the initiator of the traffic to determine the Consumer role. If the internal EPG is reaching out to the external world, it is the consumer, regardless of whether it hosts a web server.
Frequently Asked Questions
Why is the web server EPG a consumer if it serves web traffic?
What happens if I configure the EPG as a provider here?
Community Votes
60% of anonymous learners picked answer D. Votes are pick records left by other test-takers — they are not the verified answer.
Discussion 3 contributions
Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.
From public community threads 3
-
designated 👍 2 Answered DI'm wrong.. the correct answer is D. - Option A suggests that the EPG is the provider, meaning it would assume the web servers are offering a service to the L3Out. However, that is not the case here—the web servers need access to the external network for their operations. - Also, option A assumes the external cloud is consuming a service provided by the EPG, which contradicts the question’s requirement.
-
designated 👍 2 Answered AThe EPG that contains the web servers (EPG provider) requires an external Layer 3 cloud (EPG consumer) to initiate communication.
-
gentlesol 👍 1 Answered DThe right answer is D
Reader comments & corrections
No reader corrections yet — spotted an error or have a note? Share it below.